Privacy Policy

Effective Date: August 31, 2026

Overview

Overturn works for behavioral health providers in two ways. We run denial recovery: reviewing payer remittances and denial records, preparing appeals grounded in the clinical chart and payer medical-necessity policy, and tracking those appeals until they are resolved. We also build and run custom agents against a provider's own systems for workflows such as benefits verification, authorization and concurrent review, remit posting, and chart audit. In the course of either kind of work we handle protected health information (PHI) on behalf of the provider.

How We Handle Your Data

We sign a Business Associate Agreement (BAA) with each provider before handling any records. We treat PHI in accordance with HIPAA, hold substance use disorder records to 42 CFR Part 2, and operate under minimum-necessary access controls. We process records solely to provide the services described above and only as directed by the provider. We do not use provider records to train models, we do not pool one provider's records with another's, and we do not sell personal or health information.

This Site

The marketing pages collect only what you choose to send us by email. They run no advertising and no cross-site tracking.

The client portal at /portal is different, and it is the part of this site that handles your data. Signing in takes an access code and, if you supply one, a work email. Your browser keeps that session in local storage until you sign out. A file dropped in for an instant estimate is parsed in memory and discarded. A file uploaded to your workspace is stored on an encrypted volume so we can work it. Source-system connection details you choose to save, including a login URL, username, password, or API key, are encrypted before they are stored and are used only to pull your own records.

The detailed, operative privacy and data-handling terms are provided in the BAA and onboarding materials and are available on request.

Contact

For any question about this policy or how we handle your data, email josh@shiftsupportnetwork.com. See also our Terms of Service.

This description is provided for information only and is not legal advice.